Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: dktv0J9ZGhyC5rOmyO6zE42N7ih/W9DxYD82HkTboqc=
Subject key identifier: 59:7D:BE:8D:95:CC:3E:21:4F:3F:A0:49:34:5F:47:9C:71:36:2C:62
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 019F8FB524953C1969F3B0744698CBFCDEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 0971
Signing time: Thu 23 Jul 2026 16:00:40 +0000
Manifest this update: Thu 23 Jul 2026 16:00:40 +0000
Manifest next update: Fri 24 Jul 2026 16:00:40 +0000
Files and hashes: 1: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: 9RXtkuaF5GK3Fu8Pjy3CzXJueyO40fv1PK7nSwr7F+A=)
2: W47tZvu_CAnfpr4QCettmz3h4VA.roa (hash: m6c/GDR1Z9ctHQPSYVmUi8E4ot+sOPV9fr/Kpm+Mrgw=)
3: vTRqCtvnjV5ULYp3QVGnOSeLI48.roa (hash: XZSHqXZ9/2xuTC2yVf4djicrqgDxlpDHvGc8OnjW13s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:24:95:3c:19:69:f3:b0:74:46:98:cb:fc:de:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Jul 23 16:00:40 2026 GMT
Not After : Jul 24 16:00:40 2026 GMT
Subject: CN=597dbe8d95cc3e214f3fa049345f479c71362c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:21:0e:69:11:d5:28:da:cb:cf:2b:01:c9:f5:
64:df:54:f5:10:87:d5:96:aa:f6:ac:14:c5:2e:ad:
be:35:56:6b:f0:25:35:7e:a0:89:56:b2:d5:02:50:
39:d9:47:7f:62:59:1e:47:70:49:01:20:cf:79:01:
40:17:e1:d2:81:03:67:ca:fb:db:16:0c:41:94:85:
b4:45:68:7a:11:a5:53:cd:23:c3:3e:16:5e:0f:90:
36:db:ba:7d:d7:4b:28:9d:76:fa:8f:99:2d:46:2e:
39:0e:7b:84:19:93:ff:2b:15:62:a3:b1:6e:2d:e7:
ee:0d:32:7c:d9:4f:9f:e3:1f:de:f2:a7:67:21:16:
19:3e:48:ab:84:35:a6:e3:2d:a0:0b:60:d1:62:4a:
bf:90:06:6e:d5:63:44:ce:88:7a:9c:8c:19:f1:52:
d5:5e:8a:8f:76:75:38:79:8b:d5:c0:55:f0:ae:b4:
75:e1:35:51:bc:ea:93:5e:00:1d:d2:38:1d:33:50:
c0:7b:71:7f:c9:af:2c:9b:15:34:82:2b:1d:cb:07:
39:68:28:69:0e:e2:b4:33:a5:15:1c:f6:8a:2a:b9:
a8:18:db:30:bc:9a:c1:8f:a9:64:dc:5a:20:d1:15:
d2:02:09:b1:cc:d3:81:b2:74:ec:57:43:9b:3e:c1:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7D:BE:8D:95:CC:3E:21:4F:3F:A0:49:34:5F:47:9C:71:36:2C:62
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:72:1b:a6:3a:d3:0a:5c:a0:40:2f:7b:98:5d:26:fe:4b:87:
08:59:55:36:40:60:17:de:b8:74:b6:71:d4:2a:e4:7b:14:32:
0f:cf:27:77:59:2b:35:8e:e5:a6:65:de:6b:7a:7e:4e:c8:6c:
64:a8:b2:fe:0a:8f:a3:d8:4e:c7:4d:44:26:a3:ae:a5:0c:33:
da:08:60:12:2c:16:04:2b:85:84:fa:71:8b:a1:d0:44:d7:ee:
5e:f3:47:42:64:28:f8:b3:e0:d8:0f:3c:50:08:86:1a:aa:4e:
9e:35:34:84:09:c4:ef:42:78:ae:49:c4:ff:ec:4e:67:ee:80:
c9:e6:19:25:57:4b:92:fe:48:d3:d8:04:5a:85:c9:00:64:96:
20:1a:99:50:49:d6:54:96:6b:95:0c:29:af:86:96:5e:9a:c0:
a5:e4:31:08:de:9b:e1:07:79:44:42:5d:ca:57:42:c4:bf:47:
2d:90:77:7b:bb:f0:3d:68:69:33:45:91:52:6d:e9:73:f1:ea:
01:5e:58:7d:dd:cf:33:17:36:63:6b:47:2e:1a:e8:9f:c1:9c:
7e:8b:11:ec:35:7d:48:8e:a5:77:e8:5d:ff:7a:04:63:3f:65:
e4:21:66:ca:cb:4f:5f:c0:81:98:a0:d9:5c:4c:5c:07:d1:3d:
a8:1d:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:33 2026 by rpki-client